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We present a framework to prevent code injection attacks in MS Windows using Native 
APIs in the operating system. By adopting the idea of diversity, this approach is 
implemented in a two-tier framework. The first tier permutes the Native API dispatch . 



Keywords: code injection attacks, diversity, windows native API 



A type sys 



reund, 



[laiization in the Java bytecode language 



November 1999 Transactions on Programming Languages and Systems (TOPLAS) , 

Volume 21 Issue 6 

Publisher: ACM 

Additional Information: ee ciO^on, absract, ieleie-x:^,, cited by, irsd* 



;t available: <\ 



V-di (394.88 KB) ' 



Bibliometrics: Downloads (6 Weeks): 2, Downloads (12 Months): 43, Citation Count: 19 

In the standard Java implementation, a Java language program is compiled to Java 
bytecode. This bytecode may be sent across the network to another site, where it is th 
executed by the Java Virtual Machine. Since bytecode may be written by hand, or ... 
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Java bytecode verification forms the basis for Java-based Internet security and needs i 
rigorous description. One important aspect of bytecode verification is to check if a Jave 
Virtual Machine (JVM) program is statically well-typed. So far, several ... 
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This paper presents the design and an evaluation of Mondrix, a version of the Linux 
kernel with Mondriaan Memory Protection (MMP). MMP is a combination of hardware ar 
software that provides efficient fine-grained memory protection between multiple 
protection ... 
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Malware — a generic term that encompasses viruses, trojans, spywares and other 
intrusive code — is widespread today. Malware analysis is a multi-step process providir 
insight into malware structure and functionality, facilitating the development of ... 



Keywords: instrumentation, malware, security 

6 Positional ad aptation of processors: appiication to en ergy > v 



^Michael C, Huang, Jose Renau, Josep Torreilas 



June 2003 I SCA '03: Proceedings of the 30th annual international symposium on Comput 

architecture 
Publisher: ACM 

Full text available: "g.F'dj (225.57 KB) Additional Information ices, Led] 

Bibliometrics: Downloads (6 Weeks): 3, Downloads (12 Months): 39, Citation Count: 36 

Although adaptive processors can exploit application variability to improve performanc 
or save energy, effectively managing their adaptivity is challenging. To address this 
problem, we introduce a new approach to adaptivity: the Positional approach. ... 
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Software vulnerabilities have been the main contributing factor to the Internet security 
problems such as fast spreading worms. Among these software vulnerabilities, memor 
corruption vulnerabilities such as buffer overflow and format string bugs have ... 
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An important correctness criterion for software running on embedded microcontrollers 
stack safety: a guarantee that the call stack does not overflow. Our first contribution i< 
method for statically guaranteeing stack safety of interrupt-driven ... 
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System-call monitoring has become the basis for many host-based intrusion detection 
well as policy enforcement techniques. Mimicry attacks attempt to evade system-call 
monitoring IDS by executing innocuous-looking sequences of system calls that 
accomplish ... 



Keywords: buffer overflow, intrusion-detection, memory error, mimicry attack, syster 
call monitor 

10 When good Instructions go bad: generalizing return -oner-ted prograomong to RISC 
sr:f.:n, in )emeo Hova\ i t , Stetan Sayac 
October 2008 CCS '08: Proceedings of the 15th ACM conference on Computer and 

communications security 
Publisher: ACM 

Full text available: ||Pdf (415.17 KB) Additional Information: fcytshn, attract, re-s snc?S, 'xiex te -\, 
Bibliometrics: Downloads (6 Weeks): 31 , Downloads (12 Months): 92, Citation Count: 0 

This paper reconsiders the threat posed by Shacham's "return-oriented programming" 
a technique by which W-xor-X-style hardware protections are evaded via carefully 
crafted stack frames that divert control flow into the middle of existing variable-length 
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Branch prediction feeds a speculative execution processor core with instructions. Branc 
mispredictions are inevitable and have negative effects on performance and energy 
consumption. With the advent of highly accurate conditional branch predictors, ... 
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Call path profiling associates resource consumption with the calling context in which 
resources were consumed. We describe the design and implementation of a low- 
overhead call path profiler based on stack sampling. The profiler uses a novel sample- 
driven ... 
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Today's complex applications must face the distribution of data and code among diffen 
network nodes. Java is a wide-spread language that allows developers to build comple 
software, even distributed, but it cannot handle the migration of computations ... 
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We present a transparent optimisation framework for automatically improving run-tim< 
performance of component-based enterprise applications. Run-time performance is 
improved by automatically identifying and dynamically switching to an optimised but 
functionally ... 
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Stack-smashing by buffer overflow is a common tactic used by viruses and worms to 
crash or hijack systems. Exploiting a bounds-unchecked copy into a stack buffer, an 
attacker can— by supplying a specially-crafted and unexpectedly long input- 
overwrite ... 
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In this paper we share some of our experiences relating to tools used in coding phase. 
We primarily focus our discussion on two topics, namely UT (Unit Testing) and Memorv 
related errors. Unit Testing (UT) [1] is a critical early-phase verification activity ... 
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The high performance implementation of Java Virtual Machines (JVM) and Just-In-Time 
(JIT) compilers is directed toward employing a dynamic compilation system on the bas 
of online runtime profile information. The trade-off between the compilation overhead 
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We introduce a unified framework to describe, relate, compare, and classify functional 
language implementations. The compilation process is expressed as a succession of 
program transformations in the common framework. At each step, different 
transformations ... 
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Java is typically compiled into an intermediate language, JVML, that is interpreted by t 
Java Virtual Machine. Because mobile JVML code is not always trusted, a bytecode 
verifier enforces static constraints that prevent various dynamic errors. Given ... 
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This paper reports on the development and formal certification (proof of semantic 
preservation) of a compiler from Cminor (a C-like imperative language) to PowerPC 
assembly code, using the Coq proof assistant both for programming the compiler and 
for ... 
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